THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-63770 (HIGH 7.5) — Glance through 0.8.5 contains an IP address spoofing vulnerability in the authentication handler that allows unauthenticated attackers to bypass brute-force lockout protections by supplying arbitrary values in the X-Forwarded-For request header when the server proxied option is e

[NVD] CVE-2026-63770 (HIGH 7.5) — Glance through 0.8.5 contains an IP address spoofing vulnerability in the authentication handler that allows unauthenticated attackers to bypass brute-force lockout protections by supplying arbitrary values in the X-Forwarded-For request header when the server proxied option is e

lownvdPublished 2026-07-20

CVE-2026-63770 CVSS: 7.5 HIGH Published: 2026-07-20T19:17:29.770

Glance through 0.8.5 contains an IP address spoofing vulnerability in the authentication handler that allows unauthenticated attackers to bypass brute-force lockout protections by supplying arbitrary values in the X-Forwarded-For request header when the server proxied option is enabled. Attackers can manipulate the leftmost value of

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-63770